Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADB89ABEC79011EBAFE9DC24F8AEA228.roa
File:                     ADB89ABEC79011EBAFE9DC24F8AEA228.roa (raw, json)
Hash identifier:          3bq7odNYDyL3U5dm4e9yqQ/0Ibm+VFBnAS92v4HWds4=
Subject key identifier:   D1:27:D1:CB:8E:75:3E:02:17:41:89:F7:71:A5:BA:05:F7:45:69:87
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       06E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADB89ABEC79011EBAFE9DC24F8AEA228.roa
Signing time:             Mon 07 Jun 2021 13:02:57 +0000
ROA not before:           Mon 07 Jun 2021 13:02:52 +0000
ROA not after:            Wed 07 Dec 2022 13:02:52 +0000
asID:                     137969
IP address blocks:        154.92.163.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1763 (0x6e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun  7 13:02:52 2021 GMT
            Not After : Dec  7 13:02:52 2022 GMT
        Subject: CN=60be1901-54ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:d2:34:0d:d4:65:0d:22:34:8a:11:ad:0a:
                    4d:85:20:b4:52:f1:e9:8f:ab:95:92:4c:0a:7d:e6:
                    0f:40:5f:2d:5c:c5:1c:55:47:8c:14:65:8f:f8:d3:
                    30:5c:cc:0a:5f:f3:9c:80:80:b3:fd:3f:62:b0:96:
                    52:45:d5:2f:72:6c:ba:1c:e0:d0:09:0d:1f:b0:be:
                    24:2b:96:09:24:82:cc:f1:3a:19:7d:2d:f1:da:cd:
                    43:d0:4a:dd:15:30:98:b6:54:a8:5a:38:ce:65:50:
                    0c:32:13:54:bf:4a:0e:4b:3d:9f:6e:44:5c:01:28:
                    c7:09:06:93:26:77:8b:ba:fa:75:0b:d4:5f:7b:f6:
                    dd:7d:5e:8b:78:09:08:09:62:40:86:96:ca:af:b1:
                    b1:a6:14:ad:bc:81:53:d4:2d:55:dd:7e:3f:ff:1d:
                    92:2a:01:63:55:6c:16:4d:d6:a5:de:44:31:a4:7d:
                    77:83:16:49:9a:96:28:c8:82:07:4b:48:94:bf:4f:
                    1c:f9:29:6b:86:a3:1e:9f:e0:ee:88:a0:4a:d6:19:
                    09:a9:81:26:90:58:a1:38:39:48:71:b3:b5:0f:70:
                    fb:62:a9:98:15:ed:90:84:cb:57:27:ba:0f:52:62:
                    2a:b0:d5:78:a1:f0:6f:35:1e:5a:72:ed:7b:11:3e:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:27:D1:CB:8E:75:3E:02:17:41:89:F7:71:A5:BA:05:F7:45:69:87
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADB89ABEC79011EBAFE9DC24F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:82:90:80:7c:30:00:6b:d5:f7:25:6a:e2:16:47:47:63:78:
         bf:2d:00:b3:85:df:ea:cf:3c:42:b6:f3:c3:21:ce:9b:ab:ed:
         1e:7d:7f:0c:da:b6:48:c7:37:4f:b4:da:a6:e2:ef:91:00:a0:
         41:c4:18:2b:34:b7:89:ce:6e:b2:27:75:f8:27:70:03:26:6d:
         69:11:2a:12:c5:23:4b:bf:db:79:c0:6c:1b:06:1a:4f:9e:a4:
         6b:bf:b2:4b:89:16:bf:83:54:65:5a:8e:e4:a8:f7:dd:5a:ca:
         12:08:c1:c1:30:25:8e:02:84:f4:7e:f7:5f:14:0e:0b:2c:37:
         95:ab:80:38:08:d4:5c:a1:8e:da:54:4e:9a:c9:8a:48:68:48:
         2d:48:9f:47:db:33:f4:24:b7:5f:36:95:b5:8e:68:32:0d:5a:
         6c:d5:ed:00:65:36:f8:c6:33:f8:f8:5a:26:2a:31:d5:27:8c:
         b7:10:89:7e:9b:21:72:05:6c:6d:45:c4:5c:97:5c:b9:a3:0e:
         d6:d6:61:58:f3:82:c5:e7:bb:45:bf:42:52:ef:bc:f9:61:cf:
         f6:e1:82:2e:42:c8:75:a8:02:26:31:3a:b7:7d:7e:60:87:15:
         76:91:a0:1a:6f:b2:b0:68:6d:1e:19:14:0e:bf:cf:46:80:b5:
         54:70:19:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org